← Database
CVE-2026-26135
CRITICAL
CVSS: 9.6
Published: 2026-04-03
Modified: 2026-07-24
Description
Server-side request forgery (ssrf) in Azure Custom Locations Resource Provider (RP) allows an authorized attacker to elevate privileges over a network.
Affected Platforms
Microsoft Azure Custom Locations Resource Provider